NeTS-NECO: Collaborative Research: New Approaches for Secure and Dependable Distributed Data Storage and Access Control in Mission-critical Wireless Sensor Networks

NeTS-NECO：协作研究：关键任务无线传感器网络中安全可靠的分布式数据存储和访问控制的新方法

• 批准号: 0831963
• 负责人: Kui Ren
• 金额: $ 27.37万
• 依托单位: Illinois Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2012-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831963&HistoricalAwards=false
• 关键词: NeTS; NECO; Collaborative; Research; New

Distributed data storage and access in wireless sensor networks (WSNs) recently has found increased popularity driven by many mission-critical applications. While WSN security has been extensively studied in recent years with focus on network communication security, little attention has been paid on the security and dependability of distributed data storage and access control. However, it is of paramount importance to ensure data security and dependability in the mission-critical applications, where data genuineness and availability can be about life or death. This project is aimed at solving this important challenge. On the one hand, the problem of how to store the sensor network data in a distributed manner while satisfying the requirements of both fault-tolerance and compromise-resilience is studied. The problem of dynamic data security and dependability after the initial data storage is tackled as along the time sensors may be compromised and/or behave Byzantine failures. On the other hand, researches on distributed and fine-grained data access control are carried out to ensure sensor network data can only be accessed by authorized network users. The worst-case scenario is considered in which not only sensors may be compromised, but also network users may not be fully trusted. Novel symmetric key cryptography (SKC) and public key cryptography (PCK) based approaches are proposed, built on top of the in-depth security analysis of the state-of-the-art SKC solutions and efficiency enhancements over the most recent PKC primitives such as Ciphertext Policy- and Key Policy- Attribute Based Encryption, i.e., CP-ABE and KP-ABE.

最近，在许多关键任务应用的推动下，无线传感器网络 (WSN) 中的分布式数据存储和访问越来越受欢迎。近年来，无线传感器网络的安全性得到了广泛的研究，主要集中在网络通信安全上，而对分布式数据存储和访问控制的安全性和可靠性却很少关注。然而，确保关键任务应用程序中的数据安全性和可靠性至关重要，因为数据的真实性和可用性关系到生死存亡。该项目旨在解决这一重要挑战。一方面，研究了如何以分布式方式存储传感器网络数据，同时满足容错性和折衷弹性的要求。初始数据存储后的动态数据安全性和可靠性问题得到解决，因为随着时间的推移，传感器可能会受到损害和/或表现出拜占庭故障。另一方面，开展分布式、细粒度的数据访问控制研究，保证传感器网络数据只能被授权的网络用户访问。考虑最坏的情况，其中不仅传感器可能受到损害，而且网络用户也可能不被完全信任。提出了基于对称密钥加密 (SKC) 和公钥加密 (PCK) 的新颖方法，这些方法建立在对最先进的 SKC 解决方案的深入安全分析以及对最新 PKC 原语（例如作为基于密文策略和密钥策略属性的加密，即 CP-ABE 和 KP-ABE。